AuthPoint Gatewayの脆弱性3件、修正版7.6.0あり
Summary
WatchGuardのAuthPoint Gatewayに、認証サービスの停止や通信の改ざんにつながる脆弱性が3件公表されました。7.6.0より前の版を使う組織は、修正版の7.6.0へ更新し、ホストへの接続元も絞ってください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
WatchGuardのAuthPoint Gatewayに、認証サービスの停止や通信の改ざんにつながる脆弱性が3件公表されました。7.6.0より前の版を使う組織は、修正版の7.6.0へ更新し、ホストへの接続元も絞ってください。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| WatchGuard | AuthPoint Authentication Gateway |
≥ 1.0, < 7.6.0 |
7.6.0 |
Original description The description as published by the source.
A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the local directory synchronization configuration.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web psirt.watchguard.com
- web nvd.nist.gov
- web github.com